fix cors and proxy